Third, it should produce trend data to assist trainers in improving both learning andteaching.

Finally, it should produce return-on-investment statistics to enable responsible officialsto allocate limited resources in a thoughtful, strategic manner among the spectrum of ITsecurity awareness, security literacy, training, and education options for optimal resultsamong the workforce as a whole.